On Wed, Jan 3, 2024 at 12:21 PM Finn Fysj via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote: > > > Finn Fysj via FreeIPA-users wrote: > > > > There is not currently. > > > > I guess I would suggest hardening after installing IPA. You're moving > > into an untested/unsupported configuration so keep that in mind. There > > be dragons. > > > > rob > Thanks Rob. >
> However, does that mean we can get surprises if we're so bold and configure e.g UMASK after IPA installation etc.?
Yes, there could be some surprises, but there have been reports of people
using more strict UMASK. Still, it is untested/unsupported.